53c477c90fc19475857f50ad4ca3e4c678592414cd5c79139708e0b56480c564[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
53c477c90fc19475857f50ad4ca3e4c678592414cd5c79139708e0b56480c564.exe

53c477c90fc19475857f50ad4ca3e4c678592414cd5c79139708e0b56480c564.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 53c477c90fc19475857f50ad4ca3e4c678592414cd5c79139708e0b56480c564
MD5 c84597aa4d5b05886c63028929a811bc
SHA1 9bba6cab2353e26957cbb60d34a9ac2d2cf02fad
SHA512 88736e4c1452a7a39b6d85d93b54488ff297578ec93138ab1c89aa27919c0b09eb3166acaee1e69f128b8407b099bfeef58a13eaecf54cb3575e74738cd291b0
SSDEEP 12288:Mfr9Ji2eibUKo7/0Bslgxo8oO8tbV+1DL:Mfr9JVxHQgxoLZ+V
TLSH
T1F3B4F10377C1D6EBD839433199AB83566776FD125B822B073348B71C6DB22921A4B78E
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b4:4b:75:89:3a:59:47:63:df:a4:76:f4:bb:27:26:9d:7a:0b:ab:a1:c8:86:66:64:87:1c:3a:3e:65:59:bb:d4:63:14:88:73:2b:44:75:9e:a2:68:06:01:f4:9c:5f:b7

Digest Algorithm

sha384

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Dksstoles,OU=Retorsionshandlingerne peccary\ ,O=Dksstoles,C=DE,1.2.840.113549.1.9.1=#0c1646656a6c667269404e6f6e756e696f6e69736d2e496e

Chains

Jul 24, 2026

CN=Dksstoles,OU=Retorsionshandlingerne peccary\ ,O=Dksstoles,C=DE,1.2.840.113549.1.9.1=#0c1646656a6c667269404e6f6e756e696f6e69736d2e496e

PE Signature issue

Digest

81:d7:ce:6c:d8:9f:50:09:c6:f0:95:dc:37:4e:43:7b:99:dc:28:e1:2f:90:a6:6b:ee:d6:d7:78:36:50:7e:5e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Dksstoles,OU=Retorsionshandlingerne peccary\ ,O=Dksstoles,C=DE,1.2.840.113549.1.9.1=#0c1646656a6c667269404e6f6e756e696f6e69736d2e496e

Chains

Jul 24, 2026

CN=Dksstoles,OU=Retorsionshandlingerne peccary\ ,O=Dksstoles,C=DE,1.2.840.113549.1.9.1=#0c1646656a6c667269404e6f6e756e696f6e69736d2e496e

Minor OS version

0

Major OS version

4

Entry point

13145

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Glamourisations

SHA256 7074b937666084f216e1a130a7325f8a8b3678d3384d848815d5745ae17c3980
MD5 314bcdf77f81a60d01a1162e1c76d68c
SHA1 f73750564ae88278a002460a30c9249da152c904
SHA512 2d9269b6ba09ddac0f307dd1fb3d8a49177be88d0279c6e7267553564a6099d4428f0b612723f6b9b1fd4fbca830afc4a519cf21463857dcaedaf1551ff2c0ae
SSDEEP 6144:KuFuWxGzGryWco7H9lQthftvLaa394Hb+h:zYWxGKGYlQtRFz4ih
TLSH
T11544E0A8C7289700C9A50971C111E90C1576BC97B2ACB55F6FDBBCC78E129E328791FE
MD5 SHA1 SHA512 SSDEEP TLSH

Hvileperioderne.ops

SHA256 33298ac4eae7df33e0901e8eb5cf936a32553631a2ec2313fb3f6a13b3a60023
MD5 be00c17cb0719b56b0dc5100a26b0379
SHA1 708825bb0e7d5e02be10b90f74dd7e7fae315b36
SHA512 9557d43ae5fe9efc4cb1bb95020eeb1ef500034a334d6b40443f2b427bc47ff061df68ec73293af0b31be9a07ebb4cdb9c9728d08638cf01a2301c962f8743a3
SSDEEP 96:rLiqrg4PO21yChrOGqk0rUY89ESyAei8lUlqUj7W3:rLQStVAk0rURLyAeipqUj72
TLSH
T1AF737DCD76B5C558E265301AF0E0A0B23343A25ECAD64F4F6121D2063E8BEAB45C367F
MD5 SHA1 SHA512 SSDEEP TLSH

Potamophilous44

SHA256 057dfdaa10c539303927ba2056d5f6a2dbebb3211930a30a1c45f4b37e7c6dbd
MD5 433c73078e50ebf288d65c7c8955216a
SHA1 f061f89de47648dbdcea78b41358eb1faa8ad686
SHA512 104fa765aba4a4cffabcc84d6e05b5f23d77ab49c96761b0ae1f0c8ea0c96f898f64dd590a174816d0ebaed9248224ab460e76e10419f322eaf5c9385ecadf92
SSDEEP 1536:zD/vIWeh3cKrr9I4zRUBECWrsCJ6FgdQdn+EBMotpXK2XwcHDcEl1eMzQr2T:X/v8csPF4ECWw0EB3pXkcBl1eMzQKT
TLSH
T1A1E3AE539B66CCFFCC0A853CC46972D94E6870151B4FE0BDA175A818C2972E36734AFA
MD5 SHA1 SHA512 SSDEEP TLSH

Whiners.san

SHA256 d2589f0f921b7b2fe5b085225b966a4a760d9f225b2be7e6c905bf93aff059b9
MD5 2bde9cd95a636519368d942329e6c391
SHA1 c6da05a5525b512361aeb0e023c5fd89ad03e6e6
SHA512 2dcdf019d2dfaa2589d0701b5df53bccc11f2c7753d37033feac3ba3163d096a81d9f1378f43bf33870487229d6bdb9e47ac1155d8a336fc100484e18535672b
SSDEEP 48:Y8VpzESBq2lbuWA5mwYjgzhlwodM6XWoG+z264tGorBeyhS:YapzDBhbaUwYMQsbntz2640ory
TLSH
T16452E2738E7C8394AA03A0C33A020E0309EA80943AFA80AB07D63001C8FE392C882023
MD5 SHA1 SHA512 SSDEEP TLSH

delphically.baa

SHA256 42a3d803867b950b80a8e2da06fe472779a572a403e20c9b5dfc06b67798353c
MD5 81023b070ef49e7a51888b9719af9440
SHA1 da2c95e4536b4ea5c9b9e19a22cdd7ce5620559f
SHA512 55d4427bba280d2f861768ca1d679225d70652fcb79285f8bf9cc0a94b52510c2cb4f7f72fb90c973454b22ef0af9ee3a537dfec172fd56210eeb9914b32b41d
SSDEEP 12:bpXRnaZQmULJ7NdCa4aqJa0YLMchukxlXt8Ld+NHLNosLKw+tVIm6LzC+H:tX5rmUl76HM0M5ukXqGHcw6VsXCE
TLSH
T1F10275DBF0D10E42C70DF75534A244B04F138AE009029B2C1C705D7ED0838515E78FD9
MD5 SHA1 SHA512 SSDEEP TLSH

doryphoros.sli

SHA256 666a551ceb3672b241762758035c753a74b583d4cfce155597dc13d6c490417d
MD5 3c2165419503a89626aec40018bc2dae
SHA1 1a81bd4a789f7b4ee6102f4452cd6e269b262e72
SHA512 73e790a6cfc1d982e2c267ce5080b64968eab41023f7824afb6962bb60e2c4ba868cbe97c3e118ccc36bf5d3d3f63876de9047ceedb5aa79433fc8ab5c733d64
SSDEEP 96:YtvAtDeKuZ01BnyHwaBsCvGaiKPuZaJ2bbzfIcoc:YtvysayHwaNvG9KPubo2
TLSH
T10E939D337DCF35281A23E416855A07F6CC794B07A0E507212372A89B0D87ED2DAE63B9
MD5 SHA1 SHA512 SSDEEP TLSH

headborough.yan

SHA256 2a45ec5e023cec1866271945badd15061a7f52426d00554c453db9774e9bd634
MD5 9bea6a31edbc2095017d74e2aae2df3b
SHA1 d2b29f9a32e16f3fac75bf0e6069274e7130b904
SHA512 0d403a399146e8fb9c6c4993c1823b19ee679609dad5da23fd1252d4b69b44060fcc2e67d00e43461ef1a00fc2064d01873419244605d986abe47aa7d9970de6
SSDEEP 24:K84J4MqsdtNNfT9XN0F6JDrX9x2nAyDleBN9JntRhst/EiqeYvWhzZ+FZhvrs02w:KZzNxMkD9x2nAoYZtRhkXzZQTvVwSp
TLSH
T18E237E805F850C821701D617A35BEAD20CDE79A6A22D4A57DEFE170509A64347EC31E7
MD5 SHA1 SHA512 SSDEEP TLSH

sagkyndigere.eft

SHA256 ae0316af7ad6762f0533beef2c46436e10c94e1f0b69a2e9357d8760a9e4c73d
MD5 c7e290dca9539b1ca8d45db3fe31374c
SHA1 5cfe4eb4f7f98b6e79086304f56c495cfc33015e
SHA512 d1bdae5e10e7c32c991c6255104f5d6e17b1c61d582e37fcddaa63c61dce64b9bdfe8b55560c0507c542f2268a63e9b041c620591a53a69cac9d64c9d46450d5
SSDEEP 48:Xk9VM7rtZe3VHqmhbm38YN4+kXkiw2fzArBRmcnyzHYg5w:0eZe3VHqKbmzN4+viw2fzQmSq4ge
TLSH
T173B2C60360EB28DA4D9A91B981388A4A534BB98BC37A15FC67E7008B09574A374CCF27
MD5 SHA1 SHA512 SSDEEP TLSH

53c477c90fc19475857f50ad4ca3e4c678592414cd5c79139708e0b56480c564.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Glamourisations

Hvileperioderne.ops

Potamophilous44

Whiners.san

delphically.baa

doryphoros.sli

headborough.yan

sagkyndigere.eft

Sharing

General

Malware Config

Signatures

File Explorer

53c477c90fc19475857f50ad4ca3e4c678592414cd5c79139708e0b56480c564.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Glamourisations

Hvileperioderne.ops

Potamophilous44

Whiners.san

delphically.baa

doryphoros.sli

headborough.yan

sagkyndigere.eft